[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 5 01:36:00 193.204.85.177:2512 -> xxx.yyy.1.0:1433 SYN ******S* Oct 5 01:36:00 193.204.85.177:2515 -> xxx.yyy.1.1:1433 SYN ******S* Oct 5 01:36:00 193.204.85.177:2518 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 01:36:00 193.204.85.177:2521 -> xxx.yyy.1.3:1433 SYN ******S* Oct 5 01:36:00 193.204.85.177:2524 -> xxx.yyy.1.4:1433 SYN ******S* Oct 5 01:36:00 193.204.85.177:2527 -> xxx.yyy.1.5:1433 SYN ******S* Oct 5 01:36:03 193.204.85.177:2530 -> xxx.yyy.1.6:1433 SYN ******S* Oct 5 01:36:00 193.204.85.177:2533 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 5 05:28:55 193.204.85.177:1529 -> xxx.yyy.255.246:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1559 -> xxx.yyy.255.248:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1557 -> xxx.yyy.255.247:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1582 -> xxx.yyy.255.249:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1595 -> xxx.yyy.255.250:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1597 -> xxx.yyy.255.251:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1602 -> xxx.yyy.255.252:1433 SYN ******S* Oct 5 05:28:56 193.204.85.177:1614 -> xxx.yyy.255.253:1433 SYN ******S* 118652 Oct 5 20:49:44 203.206.247.86:1649 -> xxx.yyy.1.0:139 SYN ******S* Oct 5 20:49:47 203.206.247.86:1650 -> xxx.yyy.1.1:139 SYN ******S* Oct 5 20:49:47 203.206.247.86:1651 -> xxx.yyy.1.2:139 SYN ******S* Oct 5 20:49:47 203.206.247.86:1652 -> xxx.yyy.1.3:139 SYN ******S* Oct 5 20:49:47 203.206.247.86:1653 -> xxx.yyy.1.4:139 SYN ******S* Oct 5 20:49:44 203.206.247.86:1658 -> xxx.yyy.1.7:139 SYN ******S* Oct 5 20:49:47 203.206.247.86:1659 -> xxx.yyy.1.8:139 SYN ******S* Oct 5 20:49:44 203.206.247.86:1660 -> xxx.yyy.1.9:139 SYN ******S* [...] Oct 5 21:12:18 203.206.247.86:4210 -> xxx.yyy.255.244:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4211 -> xxx.yyy.255.245:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4209 -> xxx.yyy.255.243:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4231 -> xxx.yyy.255.250:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4223 -> xxx.yyy.255.248:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4213 -> xxx.yyy.255.247:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4212 -> xxx.yyy.255.246:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4232 -> xxx.yyy.255.251:139 SYN ******S* Oct 5 21:12:18 203.206.247.86:4242 -> xxx.yyy.255.254:139 SYN ******S* 68489 Oct 5 05:37:09 216.247.121.37:58973 -> xxx.yyy.1.1:8443 SYN ******S* Oct 5 05:37:09 216.247.121.37:58974 -> xxx.yyy.1.2:8443 SYN ******S* Oct 5 05:37:08 216.247.121.37:58975 -> xxx.yyy.1.3:8443 SYN ******S* Oct 5 05:37:11 216.247.121.37:58976 -> xxx.yyy.1.4:8443 SYN ******S* Oct 5 05:37:11 216.247.121.37:58977 -> xxx.yyy.1.5:8443 SYN ******S* Oct 5 05:37:11 216.247.121.37:58978 -> xxx.yyy.1.6:8443 SYN ******S* Oct 5 05:37:11 216.247.121.37:58979 -> xxx.yyy.1.7:8443 SYN ******S* Oct 5 05:37:11 216.247.121.37:58980 -> xxx.yyy.1.8:8443 SYN ******S* [...] Oct 5 05:48:49 216.247.121.37:59777 -> xxx.yyy.255.251:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59771 -> xxx.yyy.255.245:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59774 -> xxx.yyy.255.248:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59772 -> xxx.yyy.255.246:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59773 -> xxx.yyy.255.247:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59775 -> xxx.yyy.255.249:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59776 -> xxx.yyy.255.250:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59770 -> xxx.yyy.255.244:8443 SYN ******S* Oct 5 05:48:49 216.247.121.37:59780 -> xxx.yyy.255.254:8443 SYN ******S* 65105 Oct 5 08:02:18 213.31.43.131:4622 -> xxx.yyy.1.1:8000 SYN ******S* Oct 5 08:02:18 213.31.43.131:4628 -> xxx.yyy.1.2:8000 SYN ******S* Oct 5 08:02:18 213.31.43.131:4638 -> xxx.yyy.1.3:8000 SYN ******S* Oct 5 08:02:16 213.31.43.131:4640 -> xxx.yyy.1.4:8000 SYN ******S* Oct 5 08:02:19 213.31.43.131:4646 -> xxx.yyy.1.5:8000 SYN ******S* Oct 5 08:02:16 213.31.43.131:4654 -> xxx.yyy.1.6:8000 SYN ******S* Oct 5 08:02:16 213.31.43.131:4660 -> xxx.yyy.1.7:8000 SYN ******S* Oct 5 08:02:19 213.31.43.131:4674 -> xxx.yyy.1.8:8000 SYN ******S* [...] Oct 5 08:17:51 213.31.43.131:4910 -> xxx.yyy.255.239:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:4973 -> xxx.yyy.255.246:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:4997 -> xxx.yyy.255.249:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:4989 -> xxx.yyy.255.248:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:4963 -> xxx.yyy.255.245:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:4979 -> xxx.yyy.255.247:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:3016 -> xxx.yyy.255.253:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:3020 -> xxx.yyy.255.254:8000 SYN ******S* Oct 5 08:17:51 213.31.43.131:3009 -> xxx.yyy.255.252:8000 SYN ******S* 63765 Oct 5 01:58:04 169.139.176.3:2782 -> xxx.yyy.1.1:554 SYN ******S* Oct 5 01:58:04 169.139.176.3:2784 -> xxx.yyy.1.2:554 SYN ******S* Oct 5 01:58:04 169.139.176.3:2785 -> xxx.yyy.1.3:554 SYN ******S* Oct 5 01:58:05 169.139.176.3:2786 -> xxx.yyy.1.4:554 SYN ******S* Oct 5 01:58:05 169.139.176.3:2787 -> xxx.yyy.1.5:554 SYN ******S* Oct 5 01:58:05 169.139.176.3:2791 -> xxx.yyy.1.9:554 SYN ******S* Oct 5 01:58:05 169.139.176.3:2794 -> xxx.yyy.1.12:554 SYN ******S* Oct 5 01:58:02 169.139.176.3:2795 -> xxx.yyy.1.13:554 SYN ******S* [...] Oct 5 02:08:02 169.139.176.3:4648 -> xxx.yyy.255.213:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4674 -> xxx.yyy.255.239:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4687 -> xxx.yyy.255.252:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4677 -> xxx.yyy.255.242:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4679 -> xxx.yyy.255.244:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4657 -> xxx.yyy.255.222:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4649 -> xxx.yyy.255.214:554 SYN ******S* Oct 5 02:08:02 169.139.176.3:4680 -> xxx.yyy.255.245:554 SYN ******S* 57911 Oct 5 20:25:56 222.250.4.57:1247 -> xxx.yyy.1.0:1433 SYN ******S* Oct 5 20:25:56 222.250.4.57:1270 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 20:25:59 222.250.4.57:1287 -> xxx.yyy.1.4:1433 SYN ******S* Oct 5 20:25:59 222.250.4.57:1295 -> xxx.yyy.1.6:1433 SYN ******S* Oct 5 20:25:59 222.250.4.57:1377 -> xxx.yyy.1.8:1433 SYN ******S* Oct 5 20:25:59 222.250.4.57:1423 -> xxx.yyy.1.11:1433 SYN ******S* Oct 5 20:25:59 222.250.4.57:1425 -> xxx.yyy.1.12:1433 SYN ******S* Oct 5 20:25:59 222.250.4.57:1451 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 6 00:00:02 222.250.4.57:4266 -> xxx.yyy.239.124:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4275 -> xxx.yyy.239.125:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4301 -> xxx.yyy.239.129:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4303 -> xxx.yyy.239.130:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4339 -> xxx.yyy.239.131:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4452 -> xxx.yyy.239.136:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4490 -> xxx.yyy.239.137:1433 SYN ******S* Oct 6 00:00:02 222.250.4.57:4531 -> xxx.yyy.239.139:1433 SYN ******S* 57367 Oct 5 03:03:46 220.76.67.235:1125 -> xxx.yyy.1.1:4899 SYN ******S* Oct 5 03:03:46 220.76.67.235:1126 -> xxx.yyy.1.2:4899 SYN ******S* Oct 5 03:03:46 220.76.67.235:1127 -> xxx.yyy.1.3:4899 SYN ******S* Oct 5 03:03:45 220.76.67.235:1128 -> xxx.yyy.1.4:4899 SYN ******S* Oct 5 03:03:45 220.76.67.235:1129 -> xxx.yyy.1.5:4899 SYN ******S* Oct 5 03:03:45 220.76.67.235:1130 -> xxx.yyy.1.6:4899 SYN ******S* Oct 5 03:03:45 220.76.67.235:1131 -> xxx.yyy.1.7:4899 SYN ******S* Oct 5 03:03:45 220.76.67.235:1132 -> xxx.yyy.1.8:4899 SYN ******S* [...] Oct 5 03:19:50 220.76.67.235:2101 -> xxx.yyy.255.245:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2102 -> xxx.yyy.255.246:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2103 -> xxx.yyy.255.247:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2104 -> xxx.yyy.255.248:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2105 -> xxx.yyy.255.249:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2106 -> xxx.yyy.255.250:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2107 -> xxx.yyy.255.251:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2108 -> xxx.yyy.255.252:4899 SYN ******S* Oct 5 03:19:50 220.76.67.235:2109 -> xxx.yyy.255.253:4899 SYN ******S* 44256 Oct 5 06:09:48 218.236.69.49:3834 -> xxx.yyy.1.1:4899 SYN ******S* Oct 5 06:09:47 218.236.69.49:3837 -> xxx.yyy.1.4:4899 SYN ******S* Oct 5 06:09:49 218.236.69.49:3835 -> xxx.yyy.1.2:4899 SYN ******S* Oct 5 06:09:47 218.236.69.49:3838 -> xxx.yyy.1.5:4899 SYN ******S* Oct 5 06:09:49 218.236.69.49:3836 -> xxx.yyy.1.3:4899 SYN ******S* Oct 5 06:09:47 218.236.69.49:3842 -> xxx.yyy.1.9:4899 SYN ******S* Oct 5 06:09:47 218.236.69.49:3839 -> xxx.yyy.1.6:4899 SYN ******S* Oct 5 06:09:47 218.236.69.49:3840 -> xxx.yyy.1.7:4899 SYN ******S* [...] Oct 5 06:14:38 218.236.69.49:4928 -> xxx.yyy.255.237:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4951 -> xxx.yyy.255.249:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4943 -> xxx.yyy.255.247:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4959 -> xxx.yyy.255.252:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4956 -> xxx.yyy.255.251:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4966 -> xxx.yyy.255.254:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4961 -> xxx.yyy.255.253:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4953 -> xxx.yyy.255.250:4899 SYN ******S* Oct 5 06:14:38 218.236.69.49:4949 -> xxx.yyy.255.248:4899 SYN ******S* 44198 Oct 5 19:33:10 24.43.59.136:62386 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62387 -> xxx.yyy.1.3:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62390 -> xxx.yyy.1.5:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62393 -> xxx.yyy.1.7:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62406 -> xxx.yyy.1.15:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62446 -> xxx.yyy.1.31:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62447 -> xxx.yyy.1.32:1433 SYN ******S* Oct 5 19:33:10 24.43.59.136:62449 -> xxx.yyy.1.33:1433 SYN ******S* [...] Oct 5 23:19:26 24.43.59.136:63947 -> xxx.yyy.255.234:1433 SYN ******S* Oct 5 23:19:26 24.43.59.136:63992 -> xxx.yyy.255.237:1433 SYN ******S* Oct 5 23:19:27 24.43.59.136:64095 -> xxx.yyy.255.239:1433 SYN ******S* Oct 5 23:19:28 24.43.59.136:60067 -> xxx.yyy.255.241:1433 SYN ******S* Oct 5 23:19:28 24.43.59.136:60112 -> xxx.yyy.255.243:1433 SYN ******S* Oct 5 23:19:28 24.43.59.136:60162 -> xxx.yyy.255.244:1433 SYN ******S* Oct 5 23:19:29 24.43.59.136:60186 -> xxx.yyy.255.246:1433 SYN ******S* Oct 5 23:19:29 24.43.59.136:63173 -> xxx.yyy.255.248:1433 SYN ******S* Oct 5 23:19:29 24.43.59.136:63232 -> xxx.yyy.255.249:1433 SYN ******S* 41299 Oct 5 13:32:35 61.220.97.238:3501 -> xxx.yyy.1.8:1433 SYN ******S* Oct 5 13:32:32 61.220.97.238:3502 -> xxx.yyy.1.9:1433 SYN ******S* Oct 5 13:32:32 61.220.97.238:3505 -> xxx.yyy.1.12:1433 SYN ******S* Oct 5 13:32:32 61.220.97.238:3507 -> xxx.yyy.1.14:1433 SYN ******S* Oct 5 13:32:32 61.220.97.238:3509 -> xxx.yyy.1.16:1433 SYN ******S* Oct 5 13:32:32 61.220.97.238:3510 -> xxx.yyy.1.17:1433 SYN ******S* Oct 5 13:32:35 61.220.97.238:3511 -> xxx.yyy.1.18:1433 SYN ******S* Oct 5 13:32:35 61.220.97.238:3512 -> xxx.yyy.1.19:1433 SYN ******S* [...] Oct 5 13:43:31 61.220.97.238:2461 -> xxx.yyy.255.236:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2468 -> xxx.yyy.255.243:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2466 -> xxx.yyy.255.241:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2473 -> xxx.yyy.255.248:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2470 -> xxx.yyy.255.245:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2467 -> xxx.yyy.255.242:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2474 -> xxx.yyy.255.249:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2479 -> xxx.yyy.255.254:1433 SYN ******S* Oct 5 13:43:31 61.220.97.238:2476 -> xxx.yyy.255.251:1433 SYN ******S* 37119 Oct 5 13:29:00 24.164.125.6:2031 -> xxx.yyy.1.2:139 SYN ******S* Oct 5 13:28:57 24.164.125.6:2032 -> xxx.yyy.1.3:139 SYN ******S* Oct 5 13:28:57 24.164.125.6:2033 -> xxx.yyy.1.4:139 SYN ******S* Oct 5 13:28:57 24.164.125.6:2034 -> xxx.yyy.1.5:139 SYN ******S* Oct 5 13:29:00 24.164.125.6:2036 -> xxx.yyy.1.7:139 SYN ******S* Oct 5 13:28:57 24.164.125.6:2037 -> xxx.yyy.1.8:139 SYN ******S* Oct 5 13:28:57 24.164.125.6:2038 -> xxx.yyy.1.9:139 SYN ******S* Oct 5 13:29:00 24.164.125.6:2041 -> xxx.yyy.1.12:139 SYN ******S* [...] Oct 5 13:40:39 24.164.125.6:4353 -> xxx.yyy.255.223:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4358 -> xxx.yyy.255.228:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4359 -> xxx.yyy.255.229:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4373 -> xxx.yyy.255.243:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4377 -> xxx.yyy.255.247:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4374 -> xxx.yyy.255.244:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4382 -> xxx.yyy.255.252:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4383 -> xxx.yyy.255.253:139 SYN ******S* Oct 5 13:40:39 24.164.125.6:4384 -> xxx.yyy.255.254:139 SYN ******S* 36329 Oct 5 16:28:26 212.174.160.113:3777 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3779 -> xxx.yyy.1.4:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3780 -> xxx.yyy.1.5:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3781 -> xxx.yyy.1.6:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3782 -> xxx.yyy.1.7:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3785 -> xxx.yyy.1.10:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3786 -> xxx.yyy.1.11:1433 SYN ******S* Oct 5 16:28:24 212.174.160.113:3789 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 5 16:40:05 212.174.160.113:2376 -> xxx.yyy.255.217:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2396 -> xxx.yyy.255.237:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2391 -> xxx.yyy.255.232:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2392 -> xxx.yyy.255.233:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2395 -> xxx.yyy.255.236:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2394 -> xxx.yyy.255.235:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2402 -> xxx.yyy.255.243:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2403 -> xxx.yyy.255.244:1433 SYN ******S* Oct 5 16:40:06 212.174.160.113:2409 -> xxx.yyy.255.250:1433 SYN ******S* 35834 Oct 5 16:34:22 216.89.223.3:4751 -> xxx.yyy.1.1:4000 SYN ******S* Oct 5 16:34:22 216.89.223.3:4752 -> xxx.yyy.1.2:4000 SYN ******S* Oct 5 16:34:23 216.89.223.3:4753 -> xxx.yyy.1.3:4000 SYN ******S* Oct 5 16:34:25 216.89.223.3:4754 -> xxx.yyy.1.4:4000 SYN ******S* Oct 5 16:34:22 216.89.223.3:4756 -> xxx.yyy.1.6:4000 SYN ******S* Oct 5 16:34:25 216.89.223.3:4758 -> xxx.yyy.1.8:4000 SYN ******S* Oct 5 16:34:22 216.89.223.3:4760 -> xxx.yyy.1.10:4000 SYN ******S* Oct 5 16:34:22 216.89.223.3:4763 -> xxx.yyy.1.13:4000 SYN ******S* [...] Oct 5 16:45:39 216.89.223.3:3476 -> xxx.yyy.255.229:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3482 -> xxx.yyy.255.235:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3487 -> xxx.yyy.255.240:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3483 -> xxx.yyy.255.236:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3489 -> xxx.yyy.255.242:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3485 -> xxx.yyy.255.238:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3499 -> xxx.yyy.255.252:4000 SYN ******S* Oct 5 16:45:39 216.89.223.3:3496 -> xxx.yyy.255.249:4000 SYN ******S* 35754 Oct 5 14:53:09 203.234.46.118:3479 -> xxx.yyy.1.3:1433 SYN ******S* Oct 5 14:53:12 203.234.46.118:3481 -> xxx.yyy.1.4:1433 SYN ******S* Oct 5 14:53:12 203.234.46.118:3483 -> xxx.yyy.1.5:1433 SYN ******S* Oct 5 14:53:09 203.234.46.118:3477 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 14:53:12 203.234.46.118:3495 -> xxx.yyy.1.11:1433 SYN ******S* Oct 5 14:53:09 203.234.46.118:3493 -> xxx.yyy.1.10:1433 SYN ******S* Oct 5 14:53:09 203.234.46.118:3505 -> xxx.yyy.1.16:1433 SYN ******S* Oct 5 14:53:09 203.234.46.118:3507 -> xxx.yyy.1.17:1433 SYN ******S* [...] Oct 5 15:04:14 203.234.46.118:3191 -> xxx.yyy.255.246:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3185 -> xxx.yyy.255.243:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3207 -> xxx.yyy.255.254:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3205 -> xxx.yyy.255.253:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3201 -> xxx.yyy.255.251:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3203 -> xxx.yyy.255.252:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3197 -> xxx.yyy.255.249:1433 SYN ******S* Oct 5 15:04:14 203.234.46.118:3199 -> xxx.yyy.255.250:1433 SYN ******S* 35237 Oct 5 15:21:49 66.200.178.86:1379 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 15:21:46 66.200.178.86:1380 -> xxx.yyy.1.3:1433 SYN ******S* Oct 5 15:21:46 66.200.178.86:1386 -> xxx.yyy.1.9:1433 SYN ******S* Oct 5 15:21:49 66.200.178.86:1387 -> xxx.yyy.1.10:1433 SYN ******S* Oct 5 15:21:49 66.200.178.86:1390 -> xxx.yyy.1.13:1433 SYN ******S* Oct 5 15:21:46 66.200.178.86:1392 -> xxx.yyy.1.15:1433 SYN ******S* Oct 5 15:21:46 66.200.178.86:1394 -> xxx.yyy.1.17:1433 SYN ******S* Oct 5 15:21:46 66.200.178.86:1395 -> xxx.yyy.1.18:1433 SYN ******S* [...] Oct 5 15:35:10 66.200.178.86:3773 -> xxx.yyy.255.239:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3770 -> xxx.yyy.255.236:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3774 -> xxx.yyy.255.240:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3771 -> xxx.yyy.255.237:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3784 -> xxx.yyy.255.250:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3779 -> xxx.yyy.255.245:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3777 -> xxx.yyy.255.243:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3788 -> xxx.yyy.255.254:1433 SYN ******S* Oct 5 15:35:10 66.200.178.86:3787 -> xxx.yyy.255.253:1433 SYN ******S* 34699 Oct 5 22:38:51 211.78.169.133:1551 -> xxx.yyy.1.1:8000 SYN ******S* Oct 5 22:38:51 211.78.169.133:1552 -> xxx.yyy.1.2:8000 SYN ******S* Oct 5 22:38:54 211.78.169.133:1558 -> xxx.yyy.1.8:8000 SYN ******S* Oct 5 22:38:51 211.78.169.133:1559 -> xxx.yyy.1.9:8000 SYN ******S* Oct 5 22:38:54 211.78.169.133:1560 -> xxx.yyy.1.10:8000 SYN ******S* Oct 5 22:38:55 211.78.169.133:1606 -> xxx.yyy.1.56:8000 SYN ******S* Oct 5 22:38:52 211.78.169.133:1608 -> xxx.yyy.1.58:8000 SYN ******S* Oct 5 22:38:53 211.78.169.133:1610 -> xxx.yyy.1.60:8000 SYN ******S* [...] Oct 5 22:44:23 211.78.169.133:3421 -> xxx.yyy.255.235:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3431 -> xxx.yyy.255.245:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3422 -> xxx.yyy.255.236:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3435 -> xxx.yyy.255.249:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3426 -> xxx.yyy.255.240:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3423 -> xxx.yyy.255.237:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3420 -> xxx.yyy.255.234:8000 SYN ******S* Oct 5 22:44:23 211.78.169.133:3427 -> xxx.yyy.255.241:8000 SYN ******S* 32545 Oct 5 11:02:14 67.180.94.235:3755 -> xxx.yyy.1.5:4899 SYN ******S* Oct 5 11:02:14 67.180.94.235:3760 -> xxx.yyy.1.10:4899 SYN ******S* Oct 5 11:02:15 67.180.94.235:3761 -> xxx.yyy.1.11:4899 SYN ******S* Oct 5 11:02:14 67.180.94.235:3762 -> xxx.yyy.1.12:4899 SYN ******S* Oct 5 11:02:14 67.180.94.235:3763 -> xxx.yyy.1.13:4899 SYN ******S* Oct 5 11:02:15 67.180.94.235:3764 -> xxx.yyy.1.14:4899 SYN ******S* Oct 5 11:02:14 67.180.94.235:3765 -> xxx.yyy.1.15:4899 SYN ******S* Oct 5 11:02:15 67.180.94.235:3767 -> xxx.yyy.1.17:4899 SYN ******S* [...] Oct 5 11:08:16 67.180.94.235:3125 -> xxx.yyy.253.164:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3126 -> xxx.yyy.253.165:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3128 -> xxx.yyy.253.167:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3129 -> xxx.yyy.253.168:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3138 -> xxx.yyy.253.177:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3135 -> xxx.yyy.253.174:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3131 -> xxx.yyy.253.170:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3132 -> xxx.yyy.253.171:4899 SYN ******S* Oct 5 11:08:16 67.180.94.235:3140 -> xxx.yyy.253.179:4899 SYN ******S* 22513 Oct 5 07:23:59 201.10.156.24:8335 -> xxx.yyy.71.2:1773 INVALIDACK ***A*R*F Oct 5 07:24:00 201.10.156.24:8335 -> xxx.yyy.71.2:1803 INVALIDACK ***A*R*F Oct 5 07:24:02 201.10.156.24:8335 -> xxx.yyy.71.2:1833 INVALIDACK ***A*R*F Oct 5 07:24:04 201.10.156.24:8335 -> xxx.yyy.71.2:1893 INVALIDACK ***A*R*F Oct 5 07:24:05 201.10.156.24:8335 -> xxx.yyy.71.2:1923 INVALIDACK ***A*R*F Oct 5 07:24:06 201.10.156.24:8335 -> xxx.yyy.71.2:1953 INVALIDACK ***A*R*F Oct 5 07:24:06 201.10.156.24:8335 -> xxx.yyy.71.2:1983 INVALIDACK ***A*R*F Oct 5 07:24:07 201.10.156.24:8335 -> xxx.yyy.71.2:1983 INVALIDACK ***A*R*F [...] Oct 5 16:01:38 201.10.156.24:8335 -> xxx.yyy.71.2:4558 INVALIDACK ***A*R*F Oct 5 16:01:39 201.10.156.24:8335 -> xxx.yyy.71.2:4589 INVALIDACK ***A*R*F Oct 5 16:01:41 201.10.156.24:8335 -> xxx.yyy.71.2:4651 INVALIDACK ***A*R*F Oct 5 16:01:54 201.10.156.24:8335 -> xxx.yyy.71.2:1095 INVALIDACK ***A*R*F Oct 5 16:01:55 201.10.156.24:8335 -> xxx.yyy.71.2:1126 INVALIDACK ***A*R*F Oct 5 16:01:55 201.10.156.24:8335 -> xxx.yyy.71.2:1157 INVALIDACK ***A*R*F Oct 5 16:02:00 201.10.156.24:8335 -> xxx.yyy.71.2:1283 INVALIDACK ***A*R*F Oct 5 16:02:09 201.10.156.24:8335 -> xxx.yyy.71.2:1562 INVALIDACK ***A*R*F Oct 5 16:02:10 201.10.156.24:8335 -> xxx.yyy.71.2:1624 INVALIDACK ***A*R*F 20238 Oct 5 08:21:43 220.162.168.82:59910 -> xxx.yyy.243.211:1 SYN ******S* Oct 5 08:21:43 220.162.168.82:60166 -> xxx.yyy.243.211:2 SYN ******S* Oct 5 08:21:41 220.162.168.82:61702 -> xxx.yyy.243.211:8 SYN ******S* Oct 5 08:21:43 220.162.168.82:62726 -> xxx.yyy.243.211:11 SYN ******S* Oct 5 08:21:41 220.162.168.82:62982 -> xxx.yyy.243.211:12 SYN ******S* Oct 5 08:21:41 220.162.168.82:63238 -> xxx.yyy.243.211:13 SYN ******S* Oct 5 08:21:41 220.162.168.82:63494 -> xxx.yyy.243.211:14 SYN ******S* Oct 5 08:21:41 220.162.168.82:64262 -> xxx.yyy.243.211:17 SYN ******S* [...] Oct 5 09:11:28 220.162.168.82:2566 -> xxx.yyy.243.211:1080 SYN ******S* Oct 5 09:11:28 220.162.168.82:4358 -> xxx.yyy.243.211:23 SYN ******S* Oct 5 09:11:28 220.162.168.82:4870 -> xxx.yyy.243.211:53 SYN ******S* Oct 5 09:11:31 220.162.168.82:2822 -> xxx.yyy.243.211:7306 SYN ******S* Oct 5 09:11:31 220.162.168.82:3590 -> xxx.yyy.243.211:7777 SYN ******S* Oct 5 09:11:31 220.162.168.82:4102 -> xxx.yyy.243.211:12345 SYN ******S* Oct 5 09:11:37 220.162.168.82:3334 -> xxx.yyy.243.211:54320 SYN ******S* Oct 5 09:11:37 220.162.168.82:4358 -> xxx.yyy.243.211:23 SYN ******S* Oct 5 09:11:37 220.162.168.82:4614 -> xxx.yyy.243.211:21 SYN ******S* 13746 Oct 5 05:13:28 220.89.21.7:3283 -> xxx.yyy.1.1:4899 SYN ******S* Oct 5 05:13:28 220.89.21.7:3284 -> xxx.yyy.1.2:4899 SYN ******S* Oct 5 05:13:27 220.89.21.7:3301 -> xxx.yyy.1.4:4899 SYN ******S* Oct 5 05:13:27 220.89.21.7:3302 -> xxx.yyy.1.5:4899 SYN ******S* Oct 5 05:13:28 220.89.21.7:3300 -> xxx.yyy.1.3:4899 SYN ******S* Oct 5 05:13:27 220.89.21.7:3304 -> xxx.yyy.1.6:4899 SYN ******S* Oct 5 05:13:27 220.89.21.7:3313 -> xxx.yyy.1.7:4899 SYN ******S* Oct 5 05:13:27 220.89.21.7:3314 -> xxx.yyy.1.8:4899 SYN ******S* [...] Oct 5 05:21:21 220.89.21.7:3630 -> xxx.yyy.92.148:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3626 -> xxx.yyy.92.144:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3633 -> xxx.yyy.92.150:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3628 -> xxx.yyy.92.146:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3627 -> xxx.yyy.92.145:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3625 -> xxx.yyy.92.143:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3638 -> xxx.yyy.92.152:4899 SYN ******S* Oct 5 05:21:21 220.89.21.7:3629 -> xxx.yyy.92.147:4899 SYN ******S* 11874 Oct 5 00:17:58 60.35.117.191:4792 -> xxx.yyy.133.17:5554 SYN ******S* Oct 5 00:17:59 60.35.117.191:1133 -> xxx.yyy.133.17:1023 SYN ******S* Oct 5 00:18:01 60.35.117.191:1673 -> xxx.yyy.133.17:9898 SYN ******S* Oct 5 00:17:58 60.35.117.191:4791 -> xxx.yyy.133.15:5554 SYN ******S* Oct 5 00:17:59 60.35.117.191:1132 -> xxx.yyy.133.15:1023 SYN ******S* Oct 5 00:18:01 60.35.117.191:1672 -> xxx.yyy.133.15:9898 SYN ******S* Oct 5 00:17:58 60.35.117.191:4793 -> xxx.yyy.133.16:5554 SYN ******S* Oct 5 00:17:59 60.35.117.191:1124 -> xxx.yyy.133.16:1023 SYN ******S* [...] Oct 5 00:21:29 60.35.117.191:1203 -> xxx.yyy.134.45:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1245 -> xxx.yyy.134.46:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1246 -> xxx.yyy.134.47:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1250 -> xxx.yyy.134.52:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1247 -> xxx.yyy.134.50:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1248 -> xxx.yyy.134.49:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1249 -> xxx.yyy.134.39:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1251 -> xxx.yyy.134.51:9898 SYN ******S* Oct 5 00:21:29 60.35.117.191:1256 -> xxx.yyy.134.48:9898 SYN ******S* 11831 Oct 5 11:33:45 222.47.84.131:3636 -> xxx.yyy.1.1:1433 SYN ******S* Oct 5 11:33:45 222.47.84.131:4652 -> xxx.yyy.1.2:1433 SYN ******S* Oct 5 11:33:42 222.47.84.131:4384 -> xxx.yyy.1.6:1433 SYN ******S* Oct 5 11:33:45 222.47.84.131:3206 -> xxx.yyy.1.8:1433 SYN ******S* Oct 5 11:33:45 222.47.84.131:4282 -> xxx.yyy.1.9:1433 SYN ******S* Oct 5 11:33:45 222.47.84.131:4372 -> xxx.yyy.1.17:1433 SYN ******S* Oct 5 11:33:43 222.47.84.131:4610 -> xxx.yyy.1.24:1433 SYN ******S* Oct 5 11:33:43 222.47.84.131:4713 -> xxx.yyy.1.35:1433 SYN ******S* [...] Oct 5 12:37:17 222.47.84.131:3448 -> xxx.yyy.148.31:1433 SYN ******S* Oct 5 12:37:17 222.47.84.131:3137 -> xxx.yyy.148.237:1433 SYN ******S* Oct 5 12:37:17 222.47.84.131:4497 -> xxx.yyy.148.238:1433 SYN ******S* Oct 5 12:37:17 222.47.84.131:3614 -> xxx.yyy.148.92:1433 SYN ******S* Oct 5 12:37:18 222.47.84.131:4344 -> xxx.yyy.148.94:1433 SYN ******S* Oct 5 12:37:18 222.47.84.131:3691 -> xxx.yyy.149.3:1433 SYN ******S* Oct 5 12:37:18 222.47.84.131:4885 -> xxx.yyy.148.106:1433 SYN ******S* Oct 5 12:37:18 222.47.84.131:4552 -> xxx.yyy.148.109:1433 SYN ******S* Oct 5 12:37:18 222.47.84.131:4919 -> xxx.yyy.149.17:1433 SYN ******S* 10890 Oct 5 00:48:37 218.11.200.14:2645 -> xxx.yyy.235.114:5554 SYN ******S* Oct 5 00:48:38 218.11.200.14:3078 -> xxx.yyy.235.114:1023 SYN ******S* Oct 5 00:48:40 218.11.200.14:4070 -> xxx.yyy.235.114:9898 SYN ******S* Oct 5 00:48:37 218.11.200.14:2646 -> xxx.yyy.235.113:5554 SYN ******S* Oct 5 00:48:38 218.11.200.14:3079 -> xxx.yyy.235.113:1023 SYN ******S* Oct 5 00:48:37 218.11.200.14:2647 -> xxx.yyy.235.115:5554 SYN ******S* Oct 5 00:48:38 218.11.200.14:3080 -> xxx.yyy.235.115:1023 SYN ******S* Oct 5 00:48:40 218.11.200.14:4072 -> xxx.yyy.235.115:9898 SYN ******S* [...] Oct 5 00:49:23 218.11.200.14:4024 -> xxx.yyy.255.159:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4044 -> xxx.yyy.255.168:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4046 -> xxx.yyy.255.170:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4055 -> xxx.yyy.255.176:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4161 -> xxx.yyy.255.192:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4154 -> xxx.yyy.255.190:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4287 -> xxx.yyy.255.216:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4273 -> xxx.yyy.255.213:9898 SYN ******S* Oct 5 00:49:23 218.11.200.14:4290 -> xxx.yyy.255.218:9898 SYN ******S* 10428 [...] 9322 Oct 5 17:42:09 216.254.115.207:56658 -> xxx.yyy.1.135:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56575 -> xxx.yyy.1.52:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56581 -> xxx.yyy.1.58:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56582 -> xxx.yyy.1.59:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56583 -> xxx.yyy.1.60:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56585 -> xxx.yyy.1.62:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56588 -> xxx.yyy.1.65:139 SYN ******S* Oct 5 17:42:09 216.254.115.207:56590 -> xxx.yyy.1.67:139 SYN ******S* [...] Oct 5 17:55:43 216.254.115.207:36992 -> xxx.yyy.255.200:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:36997 -> xxx.yyy.255.205:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37000 -> xxx.yyy.255.208:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37001 -> xxx.yyy.255.209:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37008 -> xxx.yyy.255.216:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37010 -> xxx.yyy.255.218:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37011 -> xxx.yyy.255.219:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37012 -> xxx.yyy.255.220:139 SYN ******S* Oct 5 17:55:43 216.254.115.207:37015 -> xxx.yyy.255.223:139 SYN ******S* 8235 Oct 5 00:00:59 220.116.224.144:1169 -> xxx.yyy.195.88:5554 SYN ******S* Oct 5 00:01:02 220.116.224.144:2538 -> xxx.yyy.195.88:9898 SYN ******S* Oct 5 00:00:59 220.116.224.144:1177 -> xxx.yyy.195.96:5554 SYN ******S* Oct 5 00:01:02 220.116.224.144:2553 -> xxx.yyy.195.96:9898 SYN ******S* Oct 5 00:00:59 220.116.224.144:1181 -> xxx.yyy.195.100:5554 SYN ******S* Oct 5 00:01:02 220.116.224.144:2555 -> xxx.yyy.195.100:9898 SYN ******S* Oct 5 00:00:59 220.116.224.144:1179 -> xxx.yyy.195.98:5554 SYN ******S* Oct 5 00:01:02 220.116.224.144:2554 -> xxx.yyy.195.98:9898 SYN ******S* [...] Oct 5 00:01:48 220.116.224.144:1981 -> xxx.yyy.215.199:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1992 -> xxx.yyy.215.203:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1978 -> xxx.yyy.215.196:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1998 -> xxx.yyy.215.206:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1995 -> xxx.yyy.215.202:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1997 -> xxx.yyy.215.205:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:2000 -> xxx.yyy.215.208:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1999 -> xxx.yyy.215.207:9898 SYN ******S* Oct 5 00:01:48 220.116.224.144:1983 -> xxx.yyy.215.201:9898 SYN ******S* 7305 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions